This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/EdGf2unFPY0oseQcqROcM1VrpiU.mft File: EdGf2unFPY0oseQcqROcM1VrpiU.mft (raw, json) Hash identifier: iAa91ZoNmXiYaQzgytThTnPQWVKbAi+sIuG4cGNSND0= Subject key identifier: 81:88:84:31:D0:D6:5B:BB:6C:75:11:D4:55:81:2D:A6:41:28:83:47 Authority key identifier: 11:D1:9F:DA:E9:C5:3D:8D:28:B1:E4:1C:A9:13:9C:33:55:6B:A6:25 Certificate issuer: /CN=11d19fdae9c53d8d28b1e41ca9139c33556ba625 Certificate serial: 019B559A47F775171E5829F81F6891A6D750 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EdGf2unFPY0oseQcqROcM1VrpiU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/EdGf2unFPY0oseQcqROcM1VrpiU.mft Manifest number: 0BF4 Signing time: Thu 25 Dec 2025 13:02:12 +0000 Manifest this update: Thu 25 Dec 2025 13:02:12 +0000 Manifest next update: Fri 26 Dec 2025 13:02:12 +0000 Files and hashes: 1: EdGf2unFPY0oseQcqROcM1VrpiU.crl (hash: M+Q5qpDRuR/BCTVNpL5uXd9OSZr6WFyw0BfpUiuuRa8=) 2: hjbzdQG0z4fmkgxJ5yW_AFN2Z3I.roa (hash: FIaXEpRqjmfrs5VrZ6nFL+BtqxgLq2lRPch8+CMAMWI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/EdGf2unFPY0oseQcqROcM1VrpiU.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/EdGf2unFPY0oseQcqROcM1VrpiU.mft rsync://rpki.ripe.net/repository/DEFAULT/EdGf2unFPY0oseQcqROcM1VrpiU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 10:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:55:9a:47:f7:75:17:1e:58:29:f8:1f:68:91:a6:d7:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11d19fdae9c53d8d28b1e41ca9139c33556ba625 Validity Not Before: Dec 25 13:02:12 2025 GMT Not After : Dec 26 13:02:12 2025 GMT Subject: CN=81888431d0d65bbb6c7511d455812da641288347 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:cd:0e:a3:60:96:af:b8:88:42:c2:c0:ca:b4: c8:f1:83:d7:61:d6:69:35:31:dd:b8:47:70:42:84: 45:7b:22:2e:e8:61:46:36:b1:17:e6:38:ff:55:9b: f0:9d:ec:4d:ef:ef:23:bb:d9:6d:4e:ee:fb:ba:a6: 31:98:66:9d:2c:a3:0f:90:3b:63:1a:4d:fc:7e:ca: e5:7f:c7:8a:75:31:67:bc:d8:3a:01:d8:98:ed:e8: 0c:48:cb:7d:57:ff:de:a3:6b:1f:9a:43:fc:91:e7: 63:6f:97:91:a5:71:af:ef:b1:79:9d:3e:05:56:9a: fe:d8:a6:00:6e:4e:d9:b9:ea:56:9e:f6:ef:c2:bd: f3:cb:70:90:c8:64:f7:d7:82:43:87:5c:65:e9:05: d4:fa:b0:c4:a3:39:15:8b:56:b2:49:79:2f:03:9b: 02:ce:95:b1:25:9d:7a:95:ca:92:24:3c:76:f4:80: 22:fc:21:4d:f0:fe:17:19:d8:f6:79:87:04:94:7b: 0e:6e:c2:c3:a6:2c:44:3c:fe:f6:55:14:86:e1:d8: df:22:eb:f0:41:10:f0:95:46:93:c5:6a:f1:64:f0: b6:39:e6:5e:0b:57:87:5a:27:20:a3:f3:4c:22:23: 47:58:12:60:48:98:d9:89:da:8f:9c:af:a4:1e:24: 05:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:88:84:31:D0:D6:5B:BB:6C:75:11:D4:55:81:2D:A6:41:28:83:47 X509v3 Authority Key Identifier: keyid:11:D1:9F:DA:E9:C5:3D:8D:28:B1:E4:1C:A9:13:9C:33:55:6B:A6:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EdGf2unFPY0oseQcqROcM1VrpiU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/EdGf2unFPY0oseQcqROcM1VrpiU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/EdGf2unFPY0oseQcqROcM1VrpiU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:2a:12:54:7e:c2:f1:45:9a:e8:09:b5:08:6e:e3:5e:24:cb: 6b:45:20:27:a9:69:f4:1b:4a:2b:e0:0e:05:ce:4a:1f:7a:59: 29:7b:81:60:f2:9a:b5:63:8b:95:93:bb:d8:6d:d3:9c:10:8b: 46:10:9d:04:33:81:fa:a4:df:81:20:70:b7:14:d2:1f:fe:97: 5b:dd:5e:37:85:07:3e:79:d8:30:ec:6e:41:55:07:b0:e0:1d: 25:4a:02:c3:89:b7:9f:15:88:93:bb:7a:22:19:d1:2c:15:51: a2:bc:7b:61:86:70:e9:59:ca:23:37:99:80:0c:be:f7:b5:1e: ed:16:58:d8:34:8f:af:b6:10:70:a0:16:c8:06:9d:ab:c6:c4: 6e:5f:df:ec:ad:2d:c3:00:3c:d9:41:8e:34:d1:6f:1a:39:78: 6b:22:da:57:bb:5b:29:02:d3:34:65:08:a6:8d:db:27:46:ca: 82:8f:3d:3c:0d:85:40:4e:b3:ed:05:f2:32:c5:ef:66:eb:89: 5e:ae:01:70:92:4b:0f:c7:56:89:07:e8:34:bf:a9:e2:e7:1d: 59:9d:09:f7:c9:f7:11:4b:f6:2d:06:14:ee:7a:49:c6:f3:99: b1:67:8a:6b:9a:32:ec:0f:a3:a7:18:4c:4d:a4:b1:0d:1c:69: 2b:0f:4b:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtVmkf3dRceWCn4H2iRptdQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExZDE5ZmRhZTljNTNkOGQyOGIxZTQxY2E5MTM5YzMzNTU2 YmE2MjUwHhcNMjUxMjI1MTMwMjEyWhcNMjUxMjI2MTMwMjEyWjAzMTEwLwYDVQQD Eyg4MTg4ODQzMWQwZDY1YmJiNmM3NTExZDQ1NTgxMmRhNjQxMjg4MzQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAus0Oo2CWr7iIQsLAyrTI8YPXYdZp NTHduEdwQoRFeyIu6GFGNrEX5jj/VZvwnexN7+8ju9ltTu77uqYxmGadLKMPkDtj Gk38fsrlf8eKdTFnvNg6AdiY7egMSMt9V//eo2sfmkP8kedjb5eRpXGv77F5nT4F Vpr+2KYAbk7ZuepWnvbvwr3zy3CQyGT314JDh1xl6QXU+rDEozkVi1aySXkvA5sC zpWxJZ16lcqSJDx29IAi/CFN8P4XGdj2eYcElHsObsLDpixEPP72VRSG4djfIuvw QRDwlUaTxWrxZPC2OeZeC1eHWicgo/NMIiNHWBJgSJjZidqPnK+kHiQF/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIGIhDHQ1lu7bHUR1FWBLaZBKINHMB8GA1UdIwQY MBaAFBHRn9rpxT2NKLHkHKkTnDNVa6YlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWRHZjJ1bkZQWTBvc2VRY3FST2NNMVZycGlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81YzQ2ZDItOTgxOC00YWZjLTg4MGUt MWNjNWZkMjU0NGU5LzEvRWRHZjJ1bkZQWTBvc2VRY3FST2NNMVZycGlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS81YzQ2ZDItOTgxOC00YWZjLTg4MGUtMWNjNWZkMjU0NGU5 LzEvRWRHZjJ1bkZQWTBvc2VRY3FST2NNMVZycGlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKCoSVH7C 8UWa6Am1CG7jXiTLa0UgJ6lp9BtKK+AOBc5KH3pZKXuBYPKatWOLlZO72G3TnBCL RhCdBDOB+qTfgSBwtxTSH/6XW91eN4UHPnnYMOxuQVUHsOAdJUoCw4m3nxWIk7t6 IhnRLBVRorx7YYZw6VnKIzeZgAy+97Ue7RZY2DSPr7YQcKAWyAadq8bEbl/f7K0t wwA82UGONNFvGjl4ayLaV7tbKQLTNGUIpo3bJ0bKgo89PA2FQE6z7QXyMsXvZuuJ Xq4BcJJLD8dWiQfoNL+p4ucdWZ0J98n3EUv2LQYU7npJxvOZsWeKa5oy7A+jpxhM TaSxDRxpKw9LKA== -----END CERTIFICATE-----Generated at Thu Dec 25 17:28:47 2025 by rpki-client